Privacy policy

What data we process when you visit Home Water Institute, why, and what your rights are.

Updated: October 1, 2026

[UZUPEŁNIJ: weryfikacja prawnika — usuń tę linię po akceptacji]

Data controller

The controller of your personal data is NOVALABS VENTURES LTD, Ealing Cross, 1st Floor, 85 Uxbridge Road, London W5 5TH, United Kingdom. For data protection matters, write to contact@homewaterinstitute.co.uk.

Hosting and technical data

This website is delivered by Cloudflare, Inc. (USA), which serves the pages through its server network and protects the website against attacks. Each visit involves processing technical data: IP address, date and time, the page requested, browser and operating system, and the referring page. Cloudflare processes this data on our behalf. Legal basis: Article 6(1)(f) GDPR — our legitimate interest in running the website securely and reliably. Retention period: [UZUPEŁNIJ: okres przechowywania logów].

Cookies and analytics

The website itself does not set cookies and does not use analytics or advertising tools. For security purposes (e.g. bot protection), the hosting provider may use strictly necessary cookies: [UZUPEŁNIJ: czy ochrona Cloudflare ustawia cookies, np. __cf_bm]. If we add analytics or advertising tools, we will update this policy and ask for your consent where the law requires it.

Ad parameters

If you arrive from an ad, the page address may contain campaign tags (UTM parameters) and click identifiers (e.g. gclid, fbclid). The website’s script keeps them in your browser’s session storage (sessionStorage — not a cookie) until you close the tab and adds them to links to the shop, so the shop can tell which campaign the visit came from. The script does not send them anywhere else. Processing in the shop is described in the shop’s privacy policy. Legal basis: [UZUPEŁNIJ: podstawa prawna zapisu w pamięci przeglądarki (art. 5 ust. 3 dyrektywy ePrivacy) — do oceny prawnika].

Contacting us by email

When you email us, we process your email address and the content of your message in order to reply (Article 6(1)(f) GDPR). Retention period: [UZUPEŁNIJ: okres przechowywania korespondencji].

Recipients and transfers outside the EEA

Our service providers may receive data: Cloudflare, Inc. (hosting) and [UZUPEŁNIJ: dostawca poczty e-mail i inni odbiorcy]. Cloudflare, Inc. is based in the USA, so data may be transferred outside the European Economic Area. Transfer mechanism: [UZUPEŁNIJ: podstawa przekazania danych do USA, np. EU-U.S. Data Privacy Framework albo standardowe klauzule umowne].

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability, and to object to processing based on legitimate interests. You can also lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work (in the UK: the Information Commissioner’s Office, ico.org.uk).

This website links to online shops and other websites. Once you follow such a link, the operator of that website is responsible for processing your data.